WO2014183254A1

WO2014183254A1 - Access control method and device

Info

Publication number: WO2014183254A1
Application number: PCT/CN2013/075562
Authority: WO
Inventors: 郭雅莉; 张万强
Original assignee: 华为技术有限公司
Priority date: 2013-05-13
Filing date: 2013-05-13
Publication date: 2014-11-20
Also published as: KR20160006755A; US9877274B2; CN108901055B; JP6159475B2; BR112015028327B1; US20160066259A1; US20190239151A1; BR112015028327A2; CN104737590B; US10820260B2; CN104737590A; RU2015153428A; MX2015015719A; US10306549B2; EP2988552A4; EP3496467B1; US20180054778A1; JP2016521080A; KR101725709B1; RU2635881C2

Abstract

An access control method, wherein the method comprises: a protocol stack high level of a terminal obtaining a coverage mark; the protocol stack high level of the terminal starting an application specific congestion control for data connectivity (ACDC) check according to a service initiated by the terminal; the protocol stack high level of the terminal receiving a coverage market sent by a core network, if the protocol stack high level of the terminal determines that the service initiated by the terminal can pass the ACDC check and determines that a coverage mark corresponding to an application mark of the service passing the ACDC check comprises an access class barring (ACB) check, the protocol stack high level of the terminal sending an RRC establishment request message to an access layer of the terminal, the request message carrying an instruction indicating not performing the ACB check. In this way, the ACB check does not need to be performed, so that the terminal can also execute services of some specific applications (for example, a disaster information bulletin board service) in some special conditions even through the terminal cannot pass the ACB check.

Description

Method and device for performing access control

Technical field

The present invention relates to communication technologies, and in particular, to a method and device for performing access control. Background technique

Currently, mobile Internet applications are developing rapidly, and mobile terminals can easily download and install various applications. As the download and installation application increases the congestion on the network side, when the network is congested, the network side will prohibit certain applications from accessing the network. However, when certain natural disasters occur, the operator hopes that in the scenario of network congestion, the network still can Provide access to specific applications (such as disaster information bulletin board services or disaster voice information services), and prohibit other applications to ensure the use of resources for specific applications.

To this end, 3GPP proposes two access control mechanisms, one is the Application Specific Congestion Control For Data Connectivity (ACDC) control mechanism, which is used to allow or restrict specific applications; the other is the access level. The Access Class Barring (ACB) control mechanism is used to reduce the access load in the case of network congestion.

The ACDC and ACB access control mechanisms are enabled on the network side. When an idle terminal initiates a service, the terminal must initiate the service through the ACDC and ACB check. However, in some special cases, even if the terminal cannot pass the ACB check, it is hoped. Services for certain applications (such as disaster information bulletin board services) can be performed, but existing mechanisms cannot meet this requirement, so that when certain application services are required, the terminal cannot use the specific application service, and the user cannot be guaranteed. life safety.

Summary of the invention

In view of this, the embodiments of the present invention provide a method and a device for performing access control, so that when the ACDC check and the ACB check access control mechanism are simultaneously started on the network side, the terminal can provide the specific application without ACB check. Into the connection.

In a first aspect, an access control method includes: acquiring, by a high layer of a protocol stack of a terminal, an overlay identifier;

The protocol stack of the terminal starts the application-based congestion control ACDC according to the service initiated by the terminal. Checking; if the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier corresponding to the application identifier of the ACDC check service is forbidden to perform ACB check, the protocol stack of the terminal is high. Sending an RRC setup request message to the access layer of the terminal, where the request message carries an indication that the ACB check is not performed; if the high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines to pass the ACDC check If the coverage identifier corresponding to the application identifier of the service does not cover the ACB check, the upper layer of the protocol stack of the terminal sends an RRC setup request message to the access layer of the terminal, so that the access layer of the terminal confirms that the ACB check is performed, and then performs an RRC connection.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the obtaining, by the protocol stack of the terminal, the coverage identifier comprises: receiving, by the protocol stack of the terminal, an overlay identifier sent by the core network device; or The service stack of the terminal receives the service list sent by the core network device, and the service list carries the coverage identifier; or the protocol stack of the terminal receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the access layer of the terminal by the access layer of the terminal; or the upper layer of the protocol stack of the terminal acquires the coverage identifier of the local configuration; or the upper layer of the protocol stack of the terminal obtains the locally configured service list. The service list carries an overlay identifier. With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, after the protocol stack upper layer of the terminal confirms that the service initiated by the terminal can pass the ACDC check, the method further includes The upper layer of the protocol stack of the terminal determines whether an ACB check is required according to the coverage identifier corresponding to the application identifier of the service that is checked by the ACDC. In conjunction with the first or second possible implementation of the first aspect, in a third possible implementation manner of the first aspect, the high-layer protocol stack of the terminal starts the ACDC check according to the service initiated by the terminal. The method further includes: if the terminal is in an idle state, the high layer of the protocol stack of the terminal receives a system broadcast message sent by the terminal access layer, and notifies the high layer of the protocol stack of the terminal to start an ACDC check, where the system broadcast message is wireless. After the access network device is informed that the self and/or the core network device is congested, the ACDC check is sent, and if the terminal is in the connected state, the high-layer protocol stack of the terminal receives the dedicated signaling sent by the terminal access layer. Notifying the terminal of the protocol stack of the terminal to initiate an ACDC check, where the dedicated signaling is for the radio access network device to know itself and/or the core network device After plugging, send it after starting ACDC. The second aspect provides an access control method, where the method includes: the access layer of the terminal stores the coverage identifier sent by the radio access network device; the access layer of the terminal sends a notification for starting the ACDC check; After the terminal initiated service passes the ACDC check, the access layer of the terminal receives the RRC establishment request; if the access layer of the terminal determines that the stored coverage identifier covers the ACB check, the RRC connection establishment is performed; The access layer determines that the stored coverage identifier does not cover the ACB check, then initiates an ACB check, and performs an RRC connection setup after the ACB check passes.

With reference to the second aspect, in a first possible implementation manner of the second aspect, before the access layer of the terminal stores the coverage identifier sent by the radio access network device, the method further includes: receiving, by the access layer of the terminal, the radio The notification, the service list, and the coverage identifier of the ACDC check initiated by the access network device; or the access layer of the terminal receives the notification and the coverage identifier of the ACDC check initiated by the radio access network device. The third aspect provides an access control method, which is characterized in that: the access layer of the terminal sends a notification for starting an ACDC check; after the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives the RRC. Establishing a request, the RRC setup request carrying the coverage identifier corresponding to the application identifier of the service through the ACDC check; if the access layer of the terminal determines that the coverage identifier covers the ACB check, performing an RRC connection setup; The access layer determines that the coverage identifier does not cover the ACB check, and then starts an ACB check, and performs an RRC connection establishment after the ACB check passes.

With reference to the second aspect, in a first possible implementation manner of the second aspect, before the access layer of the terminal sends the notification for starting the ACDC check, the method further includes: receiving, by the access layer of the terminal, the radio access network device The sent notification of starting the ACDC check, the service list and the coverage identifier; or the access layer of the terminal receives the notification and the coverage identifier of the ACDC check initiated by the radio access network device. The fourth aspect provides an access control method, where the method includes: receiving, by the access layer of the terminal, a notification that the ACDC is started; the access layer of the terminal receives an RRC setup request message; and if the RRC setup request message If the ACB check is performed, the access layer of the terminal performs an RRC connection. If the RRC setup request message carries an indication for performing an ACB check, the terminal access layer performs an ACB check. , RRC connection. The fifth aspect provides a terminal, where the terminal includes: an obtaining module, configured to acquire a coverage identifier by a high layer of the protocol stack; a processing module, configured by the high layer of the protocol stack to start an application-based congestion control ACDC check according to the service initiated by the terminal; a module, configured to confirm, by the upper layer of the protocol stack, that the service initiated by the terminal can pass the ACDC check, and determine that the coverage identifier obtained by the acquiring module corresponding to the application identifier of the ACDC check service is not covered by the access level, and the ACB check is prohibited; a module, configured to send an RRC setup request message to the access layer of the terminal, where the request message carries an indication that the ACB check is not performed, after the determining module determines the coverage identifier coverage access level to prohibit the ACB check; a determining module, configured to be used by the upper layer of the protocol stack to confirm that the service initiated by the terminal can pass the ACDC check, and determine that the coverage identifier obtained by the acquiring module corresponding to the application identifier of the ACDC check service does not cover the ACB check. The sending module is configured to determine, in the determining module, that the overlay identifier is not After the ACB check is performed, the upper layer of the protocol stack sends an RRC setup request message to the access layer of the terminal, so that the access layer confirms that the ACB check is performed, and then performs an RRC connection. With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the acquiring module is specifically configured to: receive, by the upper layer of the protocol stack, a coverage identifier sent by a core network device; or The service list sent by the device, where the service list carries the coverage identifier; or the high-layer of the protocol stack receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; or the protocol stack upper layer receives the wireless access The coverage identifier sent by the network device through the access layer of the terminal; or the upper layer of the protocol stack obtains the locally configured coverage identifier; or the upper layer of the protocol stack obtains the locally configured service list, where the service list carries the coverage identifier. With reference to the first possible implementation manner of the fifth aspect, in a second possible implementation manner of the fifth aspect, the terminal further includes: a determining module, configured by the upper layer of the protocol stack to perform an application according to an ACDC check service The coverage identifier obtained by the acquiring module corresponding to the identifier is determined to determine whether an ACB check is required. With reference to the first or second possible implementation manner of the fifth aspect, in a third possible implementation manner of the fifth aspect, the terminal further includes: a receiving module, configured to receive, by the upper layer of the protocol stack The system broadcast message sent by the inbound layer notifies the upper layer of the protocol stack of the terminal to initiate an ACDC check, and the system broadcast message is sent by the radio access network device after starting the ACDC check after learning that the self and/or the core network device is congested; Receiving, by the upper layer of the protocol stack, the dedicated signaling sent by the terminal access layer, notifying the upper layer of the protocol stack of the terminal to initiate an ACDC check, where the dedicated signaling is a radio access network device. After learning that the self and/or core network equipment is congested, it is sent after the ACDC is started.

According to a sixth aspect, a terminal includes: a receiving module, configured to receive, by an access layer, a notification that initiates an ACDC; the receiving module, configured to receive, by the access layer, an RRC setup request message; The RRC setup request message received by the receiving module carries an indication that the ACB check is not performed, and the access layer of the terminal performs an RRC connection; or is used to carry an indication that the ACB check is performed in the RRC setup request message received by the receiving module, The terminal access layer performs an ACB check, and after the ACB check passes, performs an RRC connection.

According to a seventh aspect, a terminal includes: a processor, configured to acquire a coverage identifier by a protocol stack upper layer; the processor, configured by the protocol stack upper layer to start an application-based congestion control ACDC check according to a service initiated by the terminal; For confirming that the service initiated by the terminal can be checked by the ACDC at the upper layer of the protocol stack, and determining that the acquired coverage identifier corresponding to the application identifier of the ACDC check service covers the access level prohibiting ACB check; After the processor determines that the coverage indicator coverage access level prohibits the ACB check, the protocol stack layer sends an RRC setup request message to the access layer of the terminal, where the request message carries an indication that the ACB check is not performed; a processor, configured to be used by the upper layer of the protocol stack to confirm that the service initiated by the terminal can pass the ACDC check, and determine that the acquired coverage identifier corresponding to the application identifier of the ACDC check service does not cover the ACB check; a transmitter, configured to: after the processor determines that the coverage identifier does not cover the ACB check, The upper layer of the protocol stack sends an RRC setup request message to the access layer of the terminal, so that the access layer confirms that the ACB check is performed, and then performs an RRC connection. In conjunction with the seventh aspect, in a first possible implementation manner of the seventh aspect, the receiver is further configured to:

The access layer receives a notification, a service list, and a coverage identifier for initiating an ACDC check sent by the radio access network device; or the access layer receives a notification and an overlay identifier for initiating an ACDC check sent by the radio access network device.

In an eighth aspect, a terminal includes: a transmitter, configured to send, by the access layer, a notification for initiating an ACDC check; a receiver, configured to: after the initiated service passes the ACDC check, the access layer receives an RRC establishment request, where RRC establishment please And performing, by the processor, the coverage identifier corresponding to the application identifier that is used to check the service by using the ACDC; and the processor, configured to determine, by the access layer, that the coverage identifier received by the receiver covers the ACB check, and then perform RRC connection establishment; or If the ingress layer determines that the coverage identifier received by the receiver does not cover the ACB check, the ACB check is initiated, and the RRC connection setup is performed after the ACB check passes.

With the first possible implementation of the eighth aspect, the receiver is further configured to: receive, by the access layer, a notification, a service list, and an overlay identifier that are sent by the radio access network device to initiate an ACDC check; or

The ninth aspect provides a terminal, where the terminal includes: a receiver, configured to receive, by the access layer, a notification that the ACDC is activated; the receiver, configured to receive, by the access layer, an RRC setup request message; If the RRC setup request message received by the receiver carries an indication that the ACB check is not performed, the access layer of the terminal performs an RRC connection; or is used to carry the RRC setup request message received by the receiver. The ACB check indicates that the terminal access layer performs an ACB check. After the ACB check passes, the RRC connection is performed. According to a tenth aspect, an access control system is provided, including: a terminal, a core network device, and an access network device; wherein the terminal is the terminal according to any one of claims 10-13; Alternatively, the terminal is the terminal according to any one of claims 14-15; or the terminal is the terminal according to any one of claims 16-17; or the terminal according to claim 18.

The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network, and if the upper layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier of the ACDC check service covers the access level. If the ACB check is disabled, the upper layer of the protocol stack of the terminal sends an RRC setup request message to the access layer of the terminal. If the request message carries an indication that the ACB check is not performed, the ACB check is not required, so that in some special cases, even in the terminal. It is not possible to pass the ACB check, or to conduct business for certain applications (such as the disaster information bulletin board service). BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings to be used in the description of the embodiments will be described below. It is obvious that the drawings in the following description are only some of the present invention. For the embodiments, other drawings can be obtained from those skilled in the art without any inventive labor.

FIG. 1 is a flowchart of a method for performing access control according to an embodiment of the present invention;

2 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 3 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 4 is a flowchart of another embodiment of the present invention. FIG. 5 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 6 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 7 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 8 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 9 is a flowchart of another embodiment of the present invention. FIG. 10 is a flowchart of a method for performing access control according to another embodiment of the present invention; FIG. 11 is a schematic structural diagram of a terminal according to an embodiment of the present invention;

12 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

13 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

14 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

15 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

16 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

17 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

18 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

19 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

20 is a schematic structural diagram of another embodiment of a terminal according to the present invention;

The present invention will be further described in detail with reference to the accompanying drawings, in which FIG. An embodiment. Based on the embodiments of the present invention, one of ordinary skill in the art All other embodiments obtained without creative efforts are within the scope of the invention.

FIG. 1 is a flowchart of a method for performing access control according to an embodiment of the present invention, where the example includes:

Step 101: The upper layer of the protocol stack of the terminal acquires the coverage identifier. The obtaining of the coverage identifier by the protocol stack of the terminal includes: the upper layer of the protocol stack of the terminal receiving the coverage identifier sent by the core network device; or the high layer of the protocol stack of the terminal receiving the service list sent by the core network device, where the service list carries the coverage identifier Or the protocol stack of the terminal receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; or the protocol stack upper layer of the terminal receives the coverage identifier sent by the radio access network device through the access layer of the terminal; Or the upper layer of the protocol stack of the terminal obtains the coverage identifier of the local configuration; or the upper layer of the protocol stack of the terminal obtains the locally configured service list, where the service list carries the coverage identifier.

Step 102: The upper layer of the protocol stack of the terminal starts an ACDC check according to the service initiated by the terminal. Step 103a: If the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier corresponding to the application identifier of the ACDC check service is forbidden to perform the ACB check, the high layer of the protocol stack of the terminal is The access layer of the terminal sends an RRC setup request message, where the request message carries an indication that the ACB check is not performed.

Step 103b: If the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier of the ACDC check service does not cover the ACB check, the high layer of the protocol stack of the terminal is connected to the terminal. The ingress layer sends an RRC setup request message, so that the access layer of the terminal confirms that the ACB check is performed, and then performs an RRC connection.

The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network, and if the upper layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier of the ACDC check service covers the access level. If the ACB check is disabled, the upper layer of the protocol stack of the terminal sends an RRC setup request message to the access layer of the terminal. The request message carries an indication that the ACB check is not performed, so that in some special cases, even if the terminal cannot pass the ACB check, Conducting services for specific applications (such as disaster information bulletin board services). Further, after the high-layer of the terminal of the terminal confirms that the service initiated by the terminal can pass the ACDC check, the method further includes: determining, by the upper layer of the protocol stack of the terminal, the coverage identifier corresponding to the application identifier of the service through the ACDC, and determining whether the ACB check is required. . Further, before the protocol stack upper layer of the terminal starts the ACDC check according to the service initiated by the terminal, the method further includes: if the terminal is in an idle state, the protocol stack upper layer of the terminal receives the system broadcast message sent by the terminal access layer, and notifies the terminal. The high layer of the protocol stack initiates an ACDC check, and the system broadcast message is sent after the radio access network device starts the ACDC check after learning that the self and/or the core network device is congested; or if the terminal is in the connected state, the protocol stack of the terminal The upper layer receives the dedicated signaling sent by the terminal access layer, and notifies the upper layer of the protocol stack of the terminal to start the ACDC check. The dedicated signaling is sent after the radio access network device starts the ACDC after learning that the self and/or the core network device is congested. FIG. 2 is a flowchart of a method for performing access control according to another embodiment of the present invention, where the example includes:

Step 201: The access layer of the terminal stores the coverage identifier sent by the radio access network device. Step 202: The access layer of the terminal sends a notification that initiates an ACDC check. Step 203: After the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives the RRC establishment request. Step 204a: If the access layer of the terminal determines that the stored coverage identifier covers the ACB check, perform an RRC connection setup. Step 204b: If the access layer of the terminal determines that the stored coverage identifier does not cover the ACB check, initiate an ACB check, and perform an RRC connection establishment after the ACB check passes. In this embodiment, the access layer of the terminal receives and stores the coverage identifier. After the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives an RRC setup request, if the access layer of the terminal determines the storage. If the coverage identifier covers the ACB check, the RRC connection establishment is performed, so that in some special cases, even if the terminal cannot pass the ACB check, services of certain specific applications (such as the disaster information bulletin board service) can be performed. Further, before the access layer of the terminal stores the coverage identifier sent by the radio access network device, the method further includes: the access layer of the terminal receiving the notification, the service list, and the coverage identifier of the ACDC check initiated by the radio access network device Or the access layer of the terminal receives the radio access network device to send The notification and coverage identifier of the ACDC check is initiated. FIG. 3 is a flowchart of a method for performing access control according to an embodiment of the present invention, where the example includes:

301. The core network device sends an overlay identifier to a high layer of the protocol stack of the terminal.

For example, the core network device may send an Open Mobile Alliance Device Management (OMADM) message or a Non-Access Stratum (NAS) message to the upper layer of the protocol stack of the terminal, where the OMA DM message or the NAS message is carried. The coverage identifier, where the NAS message includes but is not limited to an attach accept message or a location update accept message.

The upper layer of the protocol stack of the terminal includes an application layer and/or a NAS layer. The embodiment of the present invention uses an application layer and a NAS layer as an example, but the present invention is not limited thereto.

302. The core network device determines that congestion occurs.

303. The core network device notifies the radio access network device of its own congestion.

304. After the radio access network device learns that the core network device is congested, the radio access network device starts an ACDC check.

305. The radio access network device sends a system broadcast message, and notifies the terminal to initiate an ACDC check.

306. After receiving the system broadcast message, the access layer of the terminal notifies the upper layer of the protocol stack of the terminal to start an ACDC check.

307. The upper layer of the protocol stack of the terminal starts an ACDC check.

308. The high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check according to the service list. The high-layer protocol stack of the terminal can determine whether the service initiated by the terminal can pass the ACDC check according to the service list. When the terminal initiates the service, the high-layer protocol stack of the terminal determines, according to the service list, whether the application identifier of the service is in the service list. If the application identifier of the originating service is in the service list, the service corresponding to the application identifier is allowed; if the application identifier of the originating service is not in the service list, the service corresponding to the application identifier is prohibited. The terminal can obtain the service column in the following manner: In step 301, the core network device sends the same with the coverage identifier to the upper layer of the protocol stack of the terminal; or is pre-configured on the terminal when the factory is shipped; or the network passes the NAS message or the OMA message. Configure to the terminal. The above acquisition manner is only an example of the embodiment of the present invention, and the present invention is not limited thereto.

309. If the initiated service passes the ACDC check, the upper layer of the protocol stack of the terminal checks whether the ACB check is required according to the coverage identifier corresponding to the application identifier of the service that is checked by the ACDC. The coverage identifier may be independent of the service list, and the service list may be in the form of a blacklist or a whitelist. The whitelist includes an application identifier that allows the service to be checked by the ACDC. Table 1 shows the business list in the form of a whitelist:

Table 1 The service list 1 may include three application identifiers of APP1, APP2, and APP3, which means that only the services corresponding to the three application identifiers are allowed to be initiated after the ACDC check is started. For example, APP1 may serve the disaster information bulletin board, and APP2 may be For the QQ service, the APP3 can be an Internet service. The coverage identifier can be independent of the service list. It can take the value 1 or 0. For example, if the coverage identifier is 0, the ACDC check and the ACB check are required. Only the ACDC check needs to be performed. In the embodiment of the present invention, the value of the coverage identifier is 1 as an example. The APP1, APP2, and APP3 perform only the ACDC check, and the ACB check is not required. In step 309, it is determined whether the ACB check is required, and the result is divided into 310a~311a and 310b according to the judgment result: 310a. If the coverage identifier corresponding to the application identifier of the ACDC check service does not cover the ACB check, the upper layer of the protocol stack of the terminal requests the RRC establishment of the access layer of the terminal, and step 311a is performed.

311a. The terminal access layer performs an ACB check according to the broadcast information of the base station and the Access class of the terminal, and the ACB check passes, and step 312a is performed.

312a. The terminal access layer performs an RRC connection establishment and initiates a service.

310b. If the coverage identifier corresponding to the application identifier of the ACDC check service covers the ACB check, the upper layer of the protocol stack of the terminal requests the RRC establishment from the terminal access layer, and carries the indication that the ACB check is not performed in the request message, and step 312a is performed. In this embodiment, the upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network, and determines, according to the service list, whether the service initiated by the terminal can pass the ACDC check, and if the initiated service passes the ACDC check, and the application identifier of the service is checked by the ACDC. If the corresponding coverage identifier covers the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, services for certain specific applications (such as the disaster information bulletin board service) can be performed.

FIG. 4 is a flowchart of a method for performing an access control according to another embodiment of the present invention. The service list in this embodiment includes an overlay identifier, and the example includes:

401. The core network device sends a service list to the upper layer of the protocol stack of the terminal, where the service list includes an overlay identifier, where the overlay identifier is used to determine whether the ACDC check covers the ACB check. For example, the core network device may send an OM A DM message or a NAS message to the upper layer of the protocol stack of the terminal, where the OMA DM message or the NAS message carries a service list. The upper layer of the protocol stack includes an application layer and/or a NAS layer. The embodiment of the present invention uses the application layer and the NAS layer as an example, but the present invention is not limited thereto.

402. The core network device determines that congestion occurs.

403. The core network device notifies the radio access network device of its own congestion.

404. After the radio access network device learns that the core network device is congested, the radio access network device starts an ACDC check.

405. The radio access network device sends a system broadcast message, and notifies the terminal to initiate an ACDC check. 406. After receiving the system broadcast message, the access layer of the terminal notifies the upper layer of the protocol stack of the terminal to start an ACDC check.

407. The upper layer of the protocol stack of the terminal starts an ACDC check.

408. The high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check according to the service list. The high layer of the protocol stack of the terminal can determine whether the service initiated by the terminal can pass the ACDC check according to the service list. When the terminal initiates the service, the high layer of the protocol stack of the terminal determines whether the application identifier of the service is in the service list, if the service is initiated. If the corresponding application identifier is in the service list, the service is allowed; if the application identifier corresponding to the originating service is not in the service list, the service is prohibited.

409. If the initiated service passes the ACDC check, the upper layer of the protocol stack of the terminal checks whether the ACB check is required according to the coverage identifier corresponding to the application identifier of the service that is checked by the ACDC. The service list can be expressed in the form of a blacklist or a whitelist. The whitelist includes the application identifier of the service, and the blacklist includes the application identifier of the forbidden service. Each application identifier corresponds to whether the ACDC check covers the ACB check identifier. As shown, the business list is illustrated in the form of a whitelist:

The service list 1 may include an application identifier and an overlay identifier. The application identifier may include APP1, APP2, and APP3, and the service corresponding to the three application identifiers is allowed to be initiated after the ACDC check is started. For example, the APP1 may be a disaster information announcement. The service of the column, APP2 can be a QQ service, and APP3 can be an Internet service; the coverage identifiers are respectively 1 or 0, and when the coverage identifier is 0, the generation The ACDC check and the ACB check are required. When the value of the overlay ID is 1, the ACDC check is performed only, and the ACB check is not required. Therefore, even if the terminal fails to pass the ACB check, the network cannot be checked. Disaster information bulletin board service can also be carried out to ensure the safety of users.

Step 409: After determining whether the ACB check is required, the result is divided into 410a~411a and 410b according to the judgment result:

410a, if the coverage identifier corresponding to the application identifier of the service through the ACDC check is: If the ACB check is not covered, the upper layer of the protocol stack of the terminal requests the RRC establishment of the access layer of the terminal, and step 411a is performed.

411a. The terminal access layer performs an ACB check according to the broadcast information of the base station and the Access class of the terminal, and the ACB check passes, and step 412a is performed.

412a, the terminal access layer performs an RRC connection establishment and initiates a service.

410b, if the coverage identifier corresponding to the application identifier of the ACDC check service is: Covering the ACB check, the high layer of the protocol stack of the terminal sends an RRC setup request to the terminal access layer, and carries an indication that the ACB check is not performed in the request message. Step 412a is performed.

In this embodiment, the terminal receives the service list sent by the core network device, where the service list includes the coverage identifier, and the high layer of the protocol stack of the terminal determines, according to the service list, whether the service initiated by the terminal can pass the ACDC check, if the initiated service passes the ACDC. If the coverage indicator corresponding to the application identifier of the ACDC check service covers the ACB check, the ACB check is not required. In some special cases, even if the terminal cannot pass the ACB check, the service of some specific applications can be performed. Such as disaster information bulletin board service). FIG. 5 is a flowchart of a method for performing access control according to another embodiment of the present invention. In this embodiment, if a service initiated by a terminal can pass an ACDC check, the upper layer of the protocol stack of the terminal sends the overlay identifier to the terminal. The ingress layer determines whether the ACB check is performed by the access layer of the terminal. The embodiment includes:

The steps 501 to 508 are similar to the steps 401 to 408 in the embodiment shown in FIG. 4, and details are not described herein again.

509. If the initiated service passes the ACDC check, the upper layer of the protocol stack of the terminal sends an RRC connection setup request to the terminal access layer, where the RRC connection setup request carries the ACDC check. The coverage identifier corresponding to the application identifier of the service.

510. The access layer of the terminal determines, according to the received coverage identifier, whether an ACB check is required. Step 510 determines whether the ACB check is required, and according to the judgment result, it is divided into two cases: 511a~512a and 511b:

511a, if the access layer of the terminal receives the coverage identifier: does not cover the ACB check, the access layer of the terminal performs an ACB check according to the broadcast information of the base station and the Access class of the terminal. If the ACB check passes, perform 512a.

512a, , the terminal access layer performs an RRC connection establishment and initiates a service.

511b, if the coverage identifier received by the access layer of the terminal is: Covering the ACB check, the access layer of the terminal does not need to perform an ACB check, and the access layer of the terminal performs step 512a.

In this embodiment, the terminal receives the service list sent by the core network, where the service list includes the coverage identifier, and the high layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and then sends the application identifier of the service through the ACDC check service to the access layer of the terminal. If the corresponding coverage identifier is covered, and the coverage identifier covers the identifier of the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, services of certain specific applications (such as disaster information) can be performed. Bulletin board service).

FIG. 6 is a flowchart of a method for performing access control according to another embodiment of the present invention. The embodiment is similar to the embodiment shown in FIG. 5. The embodiment includes:

Step 601: The core network device sends an overlay identifier to the upper layer of the protocol stack of the terminal.

The steps 602-607 are similar to the steps 502-507 in the embodiment 5, and are not described here. Step 608: The high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check according to the service list.

The high-layer protocol stack of the terminal can determine whether the service initiated by the terminal can pass the ACDC check according to the service list as follows:

When the terminal initiates the service, the high layer of the protocol stack of the terminal determines whether the application identifier of the initiating service is in the service list according to the service list. If the application identifier of the initiating service is in the service list, the service corresponding to the application identifier is allowed; If the application identifier of the originating service is not in the service list, then The service corresponding to the application ID is forbidden.

The method for the terminal to obtain the service list may include:

In step 601, the core network device sends the same with the overlay identifier to the protocol stack of the terminal; or is pre-configured on the terminal when the factory is shipped; or the network is configured to the terminal through the NAS message or the OMA message. The above acquisition manner is only an example of the embodiment of the present invention, and the present invention includes and is not limited thereto.

The steps 609 to 612a are similar to the steps 509 to 512a in the embodiment 5, and details are not described herein again. In this embodiment, the upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network device, and the high layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and then sends the application identifier corresponding to the ACDC check service to the access layer of the terminal. If the coverage identifier is covered and the coverage identifier covers the identifier of the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, services of certain specific applications can be performed (such as the disaster information bulletin board service). ).

FIG. 7 is a flowchart of a method for performing an access control according to another embodiment of the present invention. In this embodiment, a radio access network device sends an ACDC check to an access layer of a terminal to cover an ACB check. The embodiment includes:

701. The core network device determines that congestion occurs.

702. The core network device notifies the radio access network device of its own congestion.

703. After the radio access network device learns that the core network device is congested, the radio access network device starts an ACDC check.

704. The radio access network device sends a system broadcast message to the access layer of the terminal, and notifies the terminal to initiate an ACDC check. The broadcast message carries a service list, where the service list includes an overlay identifier.

705. After receiving the system broadcast message, the access layer of the terminal sends an ACDC check initiation notification to the upper layer of the protocol stack of the terminal, where the notification carries a service list, where the service list includes an overlay identifier.

706. The upper layer of the protocol stack of the terminal starts an ACDC check.

707. The high layer of the protocol stack of the terminal determines, according to the service list, whether the service initiated by the terminal can pass the ACDC check. If the initiated service passes the ACDC check, step 708 is performed. When the terminal initiates the service, the high layer of the protocol stack of the terminal determines whether the application identifier of the originating service is in the service list, and if the application identifier corresponding to the originating service is in the service list, the service is allowed; if the originating service corresponds to If the application ID is not in the service list, the service is forbidden.

708. The upper layer of the protocol stack of the terminal determines whether an ACB check is required according to the coverage identifier corresponding to the application identifier of the service that is checked by the ACDC.

Step 708 determines whether the ACB check is required, and according to the judgment result, it is divided into two cases: 709a~710a and 709b:

709a, if the coverage identifier corresponding to the application identifier of the service is verified by the ACDC is: the ACB check is not covered, and the upper layer of the protocol stack of the terminal requests the RRC establishment of the access layer of the terminal, and step 710a is performed.

710a. The terminal access layer performs an ACB check according to the broadcast information of the base station and the Access class of the terminal, and the ACB check passes, and step 711a is performed.

711a, the terminal access layer performs an RRC connection establishment and initiates a service.

709b, if the coverage identifier corresponding to the application identifier of the ACDC check service is: Covering the ACB check, the upper layer of the protocol stack of the terminal requests the RRC establishment of the terminal access layer, and carries the indication that the ACB check is not performed in the request message, and the step is performed. 711a.

In this embodiment, the terminal protocol stack upper layer receives the service list sent by the access layer of the terminal, and the coverage identifier included in the service list, and the high layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and the application identifier of the service is checked by the ACDC. If the corresponding coverage identifier covers the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, services for certain specific applications (such as the disaster information bulletin board service) can be performed.

FIG. 8 is a flowchart of a method for performing access control according to another embodiment of the present invention. The access control method is similar to the embodiment shown in FIG. 7 except that steps 804 and 805 are independent of the overlay identifier. Business list, this example includes:

804. The radio access network device sends a system broadcast message to the access layer of the terminal, and notifies the terminal to initiate an ACDC check, where the broadcast message carries the service list and the coverage identifier.

805. After receiving the system broadcast message, the access layer of the terminal sends the access layer of the terminal to the protocol stack of the terminal. The upper layer sends an ACDC check initiation notification, and the notification carries the service list and the coverage identifier. In this embodiment, the terminal protocol stack upper layer receives the service list and the coverage identifier sent by the access layer of the terminal, and the upper layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and the coverage identifier corresponding to the application identifier of the ACDC check service is covered. For ACB inspection, ACB inspection is not required, so that in some special cases, even if the terminal cannot pass the ACB check, services for certain specific applications (such as disaster information bulletin board service) can be performed.

FIG. 9 is a flowchart of a method for performing access control according to another embodiment of the present invention, where the embodiment includes:

901. The core network device determines that congestion occurs.

902. The core network device notifies the radio access network device of its own congestion.

903. After the radio access network device learns that the core network device is congested, the radio access network device starts an ACDC check.

904. The radio access network device sends a system broadcast message to the access layer of the terminal, and notifies the terminal to initiate an ACDC check, where the broadcast message carries the service list and the coverage identifier.

905. The access layer of the terminal stores an overlay identifier.

906. After receiving the system broadcast message, the access layer of the terminal sends an ACDC check initiation notification to the upper layer of the protocol stack of the terminal, where the notification carries the service list.

907. The upper layer of the protocol stack of the terminal starts an ACDC check.

908. The high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check according to the service list. The high-layer protocol stack of the terminal can determine whether the service initiated by the terminal can pass the ACDC check according to the service list as follows:

When the terminal initiates the service, the high layer of the protocol stack of the terminal determines whether the application identifier of the originating service is in the service list, and if the application identifier corresponding to the originating service is in the service list, the service is allowed; if the originating service corresponds to If the application ID is not in the service list, the service is forbidden.

909. The upper layer of the protocol stack of the terminal sends an RRC connection establishment request to the terminal access layer.

910. The access layer of the terminal confirms, according to the coverage identifier stored in step 905, whether the coverage identifier is Cover the ACB check. This embodiment is different from the previous embodiment. In this embodiment, the terminal access layer only needs to receive the RRC setup request, and the access layer of the triggering terminal confirms whether the stored overlay identifier covers the ACB check. Step 910 determines whether an ACB check is required, and according to the judgment result, it is divided into two situations: 911a~912a and 911b:

911a, the coverage identifier received by the access layer of the terminal does not cover the ACB check, and the access layer of the terminal performs an ACB check according to the broadcast information of the base station and the access class of the terminal. If the ACB check passes, step 912a is performed.

912a. The terminal access layer performs an RRC connection establishment and initiates a service.

911b, the coverage layer received by the access layer of the terminal covers the ACB check, and the access layer of the terminal does not need to perform the ACB check, and the access layer of the terminal directly performs step 912a. In this embodiment, the terminal access layer stores the coverage identifier sent by the radio access network device, and the high layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and then sends an RRC setup request to the access layer of the terminal to trigger the terminal access. The layer confirms whether the overlay identifier covers the ACB check according to the stored overlay identifier. If the overlay identifier covers the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, some Business for specific applications (such as disaster information bulletin board services). FIG. 10 is a flowchart of a method for performing an access control according to another embodiment of the present invention. The embodiment is similar to the embodiment shown in FIG. 9. The embodiment includes: Steps 1001 to 1003 and Step 901 in Embodiment 9 ~903 is similar, and will not be described here. Step 1004: The radio access network device sends a system broadcast message to the access layer of the terminal, and the terminal is notified to start an ACDC check, where the broadcast message carries the coverage identifier. Step 1005: The access layer of the terminal stores an overlay identifier. Step 1006: After receiving the system broadcast message, the access layer of the terminal sends an ACDC check initiation notification to the upper layer of the protocol stack of the terminal.

Step 1007: The AC stack check is started by the upper layer of the protocol stack of the terminal. Step 1008: The high layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check according to the service list. The high-layer protocol stack of the terminal can determine whether the service initiated by the terminal can pass the ACDC check according to the service list. When the terminal initiates the service, the high-layer protocol stack of the terminal determines, according to the service list, whether the application identifier of the service is in the service list. If the application identifier of the originating service is in the service list, the service corresponding to the application identifier is allowed; if the application identifier of the originating service is not in the service list, the service corresponding to the application identifier is prohibited. The method for the terminal to obtain the service list may include: in step 1001, the radio access network device sends the coverage identifier to the upper layer of the protocol stack of the terminal together with the coverage layer; or is pre-configured in the terminal when shipped from the factory On; or the network is configured to the terminal through NAS messages or OMA messages. The steps 1009 to 1012a are similar to the steps 909 to 912a in the embodiment 9, and are not described herein again. In this embodiment, the terminal access layer stores the coverage identifier sent by the radio access network device, and the high layer of the protocol stack of the terminal determines that the initiated service passes the ACDC check, and then sends an RRC setup request to the access layer of the terminal to trigger the terminal access. The layer confirms whether the overlay identifier covers the ACB check according to the stored overlay identifier. If the overlay identifier covers the ACB check, the ACB check is not required, so that in some special cases, even if the terminal cannot pass the ACB check, some Business for specific applications (such as disaster information bulletin board services). FIG. 11 is a flowchart of a method for performing an access control according to another embodiment of the present invention. The embodiment includes: Step 1101: The access layer of the terminal sends a notification for starting an ACDC check; Step 1102: When the service initiated by the terminal passes the ACDC After the check, the access layer of the terminal receives the RRC setup request, and the RRC setup request carries the overlay identifier corresponding to the application identifier of the service that is checked by the ACDC. Step 1103a: If the access layer of the terminal determines the overlay identifier If the ACB check is performed, the RRC connection is established. Step 1103b: If the access layer of the terminal determines that the coverage identifier does not cover the ACB check, Then, the ACB check is started, and the RRC connection is established after the ACB check is passed. In this embodiment, after the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives an RRC setup request, where the RRC setup request carries the overlay identifier corresponding to the application identifier of the ACDC check service, if the terminal The access layer determines that the coverage identifier covers the ACB check, and then performs an RRC connection establishment, so that in some special cases, even if the terminal cannot pass the ACB check, the service of some specific applications (such as the disaster information bulletin board service) can be performed. .

Further, before the access layer of the terminal sends the notification for starting the ACDC check, the method further includes: receiving, by the access layer of the terminal, a notification, a service list, and an overlay identifier that are sent by the radio access network device to initiate an ACDC check; or

The access layer of the terminal receives the notification and the coverage identifier of the ACDC check initiated by the radio access network device.

FIG. 12 is a flowchart of a method for performing access control according to another embodiment of the present invention, where the embodiment includes:

Step 1201: The access layer of the terminal receives the notification that the ACDC is started. Step 1202: The access layer of the terminal receives an RRC setup request message.

Step 1203a: If the RRC setup request message carries an indication that the ACB check is not performed, the access layer of the terminal performs an RRC connection.

Step 1203b: If the RRC setup request message carries an indication for performing an ACB check, the terminal access layer performs an ACB check, and after the ACB check passes, performs an RRC connection. In this embodiment, the access layer of the terminal receives an RRC setup request message, and if the RRC setup request message carries an indication that the ACB check is not performed, the access layer of the terminal performs an RRC connection, so that in some special cases Next, even if the terminal cannot pass the ACB check, it can perform services for certain specific applications (such as the disaster information bulletin board service).

The method for performing access control according to another embodiment of the present invention is similar to the previous embodiment, except that the terminal in the foregoing embodiment obtains the coverage identifier from the network side, but in this embodiment, the terminal The upper layer of the protocol stack can obtain the coverage identifier of the local configuration, and the local configuration can be preset when the terminal is shipped from the factory. The access control method provided by another embodiment of the present invention is similar to the previous embodiment, except that in the foregoing embodiment, the radio access network device notifies the terminal to initiate an ACDC check by using a system broadcast message, but in this embodiment, For the connected terminal, the radio access network device can also send a notification of the ACDC check initiation through dedicated signaling. The access control method provided by another embodiment of the present invention is similar to the foregoing embodiment, except that, in the foregoing embodiment, after the core network device determines that congestion occurs, the network device notifies the wireless access network device of congestion. The ACDC check is initiated by the radio access network device. In this embodiment, in one case, when the radio access network device is congested, the ACDC check may be initiated; the other case is the core network device and the radio access network device. After congestion occurs, the radio access network device initiates an ACDC check.

FIG. 13 is a schematic structural diagram of a terminal according to an embodiment of the present invention. The terminal includes: an acquiring module 1301, configured to acquire an overlay identifier by a high layer of a protocol stack. The processing module 1302 is configured to start, by the protocol stack upper layer, an application-based congestion control ACDC check according to the service initiated by the terminal. The determining module 1303 is configured to confirm, by the upper layer of the protocol stack, that the service initiated by the terminal can pass the ACDC check, and determine that the coverage identifier obtained by the acquiring module corresponding to the application identifier of the ACDC check service is covered by the access level, and the access level is prohibited from being checked by the ACB. . The sending module 1304 is configured to: after the determining module 1303 determines that the coverage identifier coverage access level prohibits the ACB check, the protocol stack upper layer sends an RRC setup request message to the access layer of the terminal, where the request message carries the ACB check Instructions. The determining module 1303 is configured to be used by the upper layer of the protocol stack to confirm that the service initiated by the terminal can pass the ACDC check, and determine that the coverage identifier obtained by the acquiring module is not covered by the application identifier of the ACDC check service. ACB check. The sending module 1304 is configured to: after the determining module 1303 determines that the coverage identifier does not cover the ACB check, the protocol stack upper layer sends an RRC setup request message to the access layer of the terminal, so as to enable access After confirming the ACB check, the layer performs an RRC connection. The acquiring module may be specifically configured to: receive, by the upper layer of the protocol stack, a coverage identifier sent by the core network device; or the high layer of the protocol stack receives a service list sent by the core network device, where the service list carries an overlay identifier; The high-layer of the protocol stack receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; or the high-layer of the protocol stack receives the coverage identifier sent by the radio access network device through the access layer of the terminal; or The upper layer of the protocol stack obtains the coverage identifier of the local configuration; or the upper layer of the protocol stack obtains the locally configured service list, and the service list carries the coverage identifier.

Optionally, the terminal may further include a determining module 1305, configured to determine, by the upper layer of the protocol stack, the coverage identifier obtained by the acquiring module corresponding to the application identifier of the ACDC check service, and determine whether an ACB check is required.

Optionally, the terminal may further include a receiving module 1306, configured to receive, by the upper layer of the protocol stack, a system broadcast message sent by the access layer of the terminal, and notify the upper layer of the protocol stack of the terminal to initiate an ACDC check, where the system broadcast message is wireless access. After the network device is informed that the network device is congested, the ACDC check is sent after the ACDC check is initiated; or the high layer of the protocol stack receives the dedicated signaling sent by the access layer of the terminal, and the upper layer of the protocol stack is notified to start the ACDC check. The dedicated signaling is sent by the radio access network device after the ACDC is started after learning that the self and/or the core network device is congested.

The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network, and if the upper layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, and determines that the coverage identifier corresponding to the application identifier of the ACDC check service covers the access level. If the ACB check is disabled, the upper layer of the protocol stack of the terminal sends an RRC setup request message to the access layer of the terminal. If the request message carries an indication that the ACB check is not performed, the ACB check is not required, so that in some special cases, even in the terminal. It is not possible to pass the ACB check, or to conduct business for certain applications (such as the disaster information bulletin board service).

In the hardware implementation, the above modules may be embedded in the hardware of the base station in hardware, or may be stored in the terminal in the software, such as the memory of the UE, so that the processor calls the corresponding operations of the above modules. . The processor can be a central processing unit (CPU), a microprocessor, a microcontroller, or the like. The terminal shown in FIG. 13 can perform the corresponding steps in the foregoing embodiments. For details, refer to the description of the foregoing embodiment. The effect achieved can also be seen in the above embodiments. FIG. 14 is a schematic structural diagram of another embodiment of a terminal according to the present invention. The terminal includes: a storage module 1401, configured to be used by an access layer to store an overlay identifier sent by a radio access network device. The sending module 1402 is configured to send, by the access layer, a notification that initiates an ACDC check. The receiving module 1403 is configured to: after the service initiated by the terminal passes the ACDC check, the access layer receives an RRC setup request. The processing module 1404 is configured to: after the access layer determines that the coverage identifier stored by the storage module covers the ACB check, perform RRC connection establishment; or determine, at the access layer, that the coverage identifier stored by the storage module is not The ACB check is overwritten and the ACB check is initiated. After the ACB check is passed, the RRC connection is established. Optionally, the receiving module is further configured to: receive, by the access layer, a notification, a service list, and a coverage identifier that are sent by the radio access network device to initiate an ACDC check; or the access layer receives the radio access network device to send The notification and coverage identifier of the ACDC check is initiated. In the hardware implementation, the above modules may be embedded in the hardware of the base station in hardware, or may be stored in the terminal in the software, such as the memory of the UE, so that the processor calls the corresponding operations of the above modules. . The processor can be a central processing unit (CPU), a microprocessor, a microcontroller, or the like. The terminal shown in FIG. 14 can perform the corresponding steps in the foregoing embodiments. For details, refer to the description of the foregoing embodiment. The effect achieved can also be seen in the above embodiments. In the embodiment of the present invention, the storage module stores the coverage identifier sent by the radio access network device, and the processing module performs the RRC connection establishment after the access layer determines that the coverage identifier of the storage module is covered by the ACB check, or is used for The access layer determines that the coverage identifier stored by the storage module does not cover the ACB check, initiates an ACB check, and performs an RRC connection establishment after the ACB check passes, so that in some special cases, even if the terminal cannot pass the ACB check, Conducting services for specific applications (such as disaster information bulletin board services).

Figure 15 is a diagram of a terminal according to another embodiment of the present invention, where the terminal includes:

The sending module 1501 is configured to send, by the access layer, a notification for starting an ACDC check.

twenty four

Replacement page (Article 26) The receiving module 1502 is configured to: after the initiated service passes the ACDC check, the access layer receives an RRC setup request, where the RRC setup request carries an overlay identifier corresponding to the application identifier of the service that is checked by the ACDC. The processing module 1503 is configured to determine, by the access layer, that the coverage identifier received by the receiving module covers an ACB check, and then perform RRC connection establishment; or that the access layer determines that the coverage identifier received by the receiving module does not cover the ACB If the check is performed, the ACB check is started, and the RRC connection establishment is performed after the ACB check is passed. Optionally, the receiving module is further configured to: receive, by the access layer, a notification, a service list, and a coverage identifier that are sent by the radio access network device to initiate an ACDC check; or the access layer receives the radio access network device to send The notification and coverage identifier of the ACDC check is initiated.

In the embodiment of the present invention, after the initiated service passes the ACDC check, the receiving module receives an RRC setup request, where the RRC setup request carries the overlay identifier corresponding to the application identifier of the ACDC check service, and the processing module determines the receiving If the coverage identifier received by the module covers the ACB check, the RRC connection is established, so that in some special cases, even if the terminal cannot pass the ACB check, services of certain specific applications (such as the disaster information bulletin board service) can be performed.

In the hardware implementation, the above modules may be embedded in the hardware of the base station in hardware, or may be stored in the terminal in the software, such as the memory of the UE, so that the processor calls the corresponding operations of the above modules. . The processor can be a central processing unit (CPU), a microprocessor, a microcontroller, or the like. The terminal shown in FIG. 15 can perform the corresponding steps in the foregoing embodiments. For details, refer to the description of the foregoing embodiment. The effect achieved can also be seen in the above embodiments.

Figure 16 is a diagram of a terminal according to another embodiment of the present invention, where the terminal includes:

The receiving module 1601 is configured to receive, by the access layer, a notification that the ACDC is started. The receiving module is configured to receive, by the access layer, an RRC setup request message.

The processing module 1602 is configured to: if the RRC setup request message received by the receiving module carries an indication that the ACB check is not performed, the access layer of the terminal performs an RRC connection; or

25

Replacement page (Article 26) The RRC setup request message received by the receiving module carries an indication for performing an ACB check, and the terminal access layer performs an ACB check. After the ACB check passes, the RRC connection is performed.

The RRC setup request message carries an indication that the ACB check is not performed, and the access layer of the terminal performs an RRC connection, so that in some special cases, even if the terminal cannot pass the ACB check, the service of some specific applications can be performed (for example, Disaster information bulletin board service).

FIG. 17 is a diagram of a terminal according to another embodiment of the present invention, where the terminal includes: a processor 1701, configured to acquire an overlay identifier by a high layer of a protocol stack. The processor 1701 is configured to start, by the protocol stack upper layer, an application-based congestion control ACDC check according to the service initiated by the terminal. The processor 1701 is configured to confirm, at a high layer of the protocol stack, that the service initiated by the terminal can pass the ACDC check, and determine that the obtained coverage identifier corresponding to the application identifier of the ACDC check service is used to cover the access level and prohibit ACB check. .

The transmitter 1702 is configured to send, by the upper layer of the protocol stack, an RRC setup request message to the access layer of the terminal, where the request message does not perform an ACB check, after the processor determines that the coverage identifier coverage access level prohibits the ACB check. Instructions. The processor 1701 is configured to be used by the upper layer of the protocol stack to confirm that the service initiated by the terminal can pass the ACDC check, and determine that the acquired coverage identifier corresponding to the application identifier of the ACDC check service does not cover the ACB check. . The transmitter 1702 is configured to: after the processor determines that the coverage identifier does not cover the ACB check, the protocol stack upper layer sends an RRC setup request message to the access layer of the terminal, so that the access layer confirms the ACB check. , RRC connection. The embodiment of the present invention confirms that the service initiated by the terminal can pass the ACDC check at the upper layer of the protocol stack, and determines that the coverage identifier obtained by the acquiring module corresponding to the application identifier of the ACDC check service is covered by the access identifier. The ACB check is prohibited at the level, so that in some special cases, even if the terminal cannot pass the ACB check, it can perform services for certain specific applications (such as the disaster information bulletin board service). The processor is specifically configured to: receive, by the upper layer of the protocol stack, a coverage identifier sent by the core network device; or the high layer of the protocol stack receives a service list sent by the core network device, where the service list carries an overlay identifier; or The upper layer of the protocol stack receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; or the upper layer of the protocol stack receives the coverage identifier sent by the radio access network device through the access layer of the terminal; or the protocol The stack upper layer obtains the localized overlay identifier; or the protocol stack upper layer obtains the locally configured service list, and the service list carries the overlay identifier. Further, the processor is further configured to: determine, by the high layer of the protocol stack, whether the ACB check is required according to the acquired coverage identifier corresponding to the application identifier of the service that is checked by the ACDC. Further, the terminal further includes: a receiver, configured to receive, by the upper layer of the protocol stack, a system broadcast message sent by the access layer of the terminal, and notify the upper layer of the protocol stack of the terminal to initiate an ACDC check, where the system broadcast message is a radio access network device. After the ACDC check is started after the self and/or the core network device is congested, the protocol stack is sent by the upper layer of the protocol stack to receive the dedicated signaling sent by the terminal access layer, and the upper layer of the protocol stack is notified to start the ACDC check. After the ACDC network device starts to know the congestion of itself and/or the core network device, it is sent after the ACDC is started. FIG. 18 is a terminal according to another embodiment of the present invention. The terminal includes: a memory 1801, configured to store, by an access layer, an overlay identifier sent by a radio access network device. The transmitter 1802 is configured to send, by the access layer, a notification that initiates an ACDC check. The receiver 1803 is configured to: after the service initiated by the terminal passes the ACDC check, the access layer receives an RRC setup request.

The processor 1804 is configured to perform RRC connection establishment after the access layer determines the coverage identifier of the memory storage to cover the ACB check, or determine that the coverage identifier of the memory storage does not cover the ACB at the access layer. Check, start ACB check, and establish RRC connection after ACB check. In the embodiment of the present invention, the access layer stores the coverage identifier sent by the radio access network device, and after the service initiated by the terminal passes the ACDC check, the access layer receives the RRC establishment request, and is used to After the access layer determines that the coverage identifier stored by the storage module covers the ACB check, the RRC connection is established, so that in some special cases, even if the terminal cannot pass the ACB check, the service of some specific applications may be performed (for example, Disaster information bulletin board service). Further, the receiver is further configured to:

And the access layer receives the notification, the service list, and the coverage identifier that are sent by the radio access network device to initiate the ACDC check; or the access layer receives the notification and the coverage identifier of the ACDC check initiated by the radio access network device. FIG. 19 is a diagram of a terminal according to another embodiment of the present invention. The terminal includes: a transmitter 1901, configured to send, by the access layer, a notification for starting an ACDC check. The receiver 1902 is configured to: after the initiated service passes the ACDC check, the access layer receives an RRC setup request, where the RRC setup request carries an overlay identifier corresponding to the application identifier of the ACDC check service. The processor 1903 is configured to determine, by the access layer, that the coverage identifier received by the receiver covers an ACB check, and then perform an RRC connection setup; or use the access layer to determine that the coverage identifier received by the receiver does not cover the ACB. If the check is performed, the ACB check is started, and the RRC connection establishment is performed after the ACB check is passed. In the embodiment of the present invention, after the initiated service passes the ACDC check, the access layer receives an RRC setup request, and the RRC setup request carries the overlay identifier corresponding to the application identifier of the service through the ACDC check, thereby making the special identifier in some special cases. Even if the terminal cannot pass the ACB check, it can perform services for certain specific applications (such as the disaster information bulletin board service). Further, the receiver is further configured to: receive, by the access layer, a notification, a service list, and a coverage identifier that are sent by the radio access network device to initiate an ACDC check; or the access layer receives the startup sent by the radio access network device. Notification and coverage identification for ACDC inspection. FIG. 20 is a terminal according to another embodiment of the present invention. The terminal includes: a receiver 2001, configured to receive, by the access layer, a notification that the ACDC is started. The receiver 2001 is configured to receive, by the access layer, an RRC setup request message. The processing module 2002 is configured to: if the RRC setup request message received by the receiver carries an indication that the ACB check is not performed, the access layer of the terminal performs an RRC connection; or is used for an RRC setup request received by the receiver. The message carries an indication for performing an ACB check, and the terminal access layer performs an ACB check. After the ACB check passes, the RRC connection is performed.

The RRC setup request message carries an indication that the ACB check is not performed, and the access layer of the terminal performs an RRC connection, so that in some special cases, even if the terminal cannot pass the ACB check, the service of some specific applications can be performed (for example, Disaster information bulletin board service). It should be noted that the terminals shown in FIG. 17 to FIG. 20 can respectively implement the methods provided by the terminal in the foregoing method embodiments. For details, refer to the description of the foregoing embodiments. The effect achieved can also be seen in the above embodiments.

It can be clearly understood by those skilled in the art that for the convenience and cleanness of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed. The internal structure of the device is divided into different functional modules to perform all or part of the functions described above. For the specific working process of the system, the device and the unit described above, reference may be made to the corresponding process in the foregoing method embodiments, and details are not described herein again.

In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be used. Combined or can be integrated into another system, or some features can be ignored, or not executed. Alternatively, the coupling or direct coupling or communication connection between the various components shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be electrical, mechanical or otherwise.

The components displayed for the unit may or may not be physical units, ie may be located in one place, or may be distributed over multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated in one processing unit. It is also possible that each unit physically exists alone, or two or more units may be integrated in one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application, in essence or the contribution to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. The instructions include a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: a U disk, a removable hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program code. . The above embodiments are only used to illustrate the technical solutions of the present application, and are not limited thereto. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that The technical solutions described in the embodiments are modified, or some of the technical features are equivalently replaced; and the modifications or substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

Rights request

1. An access control method, characterized by including: The upper layer of the terminal's protocol stack obtains the coverage identifier; The higher layer of the terminal's protocol stack initiates an application-based congestion control ACDC check according to the service initiated by the terminal; If the upper layer of the terminal's protocol stack confirms If the service initiated by the terminal can pass the ACDC check, and it is determined that the access level is covered by the coverage identifier corresponding to the application identifier of the ACDC check service to prohibit ACB check, then the upper layer of the protocol stack of the terminal sends an RRC establishment to the access layer of the terminal. Request message, the request message carries an instruction not to perform ACB inspection; If the upper layer of the terminal's protocol stack confirms that the service initiated by the terminal can pass the ACDC inspection, and determines the coverage identification corresponding to the application identification of the service that passes the ACDC inspection If the ACB check is not covered, the upper layer of the protocol stack of the terminal sends an RRC establishment request message to the access layer of the terminal, so that the access layer of the terminal confirms that the ACB check is passed and then performs the RRC connection.

2. The method according to claim 1, wherein the upper layer of the protocol stack of the terminal obtains the coverage identifier including:

The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the core network device; or the higher layer of the protocol stack of the terminal receives the service list sent by the core network device, and the service list carries the coverage identifier; or

The upper layer of the protocol stack of the terminal receives the service list sent by the terminal access layer, and the service list carries the coverage identifier; or

The upper layer of the protocol stack of the terminal receives the coverage identifier sent by the wireless access network device through the access layer of the terminal; or the higher layer of the protocol stack of the terminal obtains the locally configured coverage identifier; or the upper layer of the protocol stack of the terminal obtains the locally configured service The service list carries the coverage identifier.

3. The method according to claim 1 or 2, characterized in that, after the upper layer of the protocol stack of the terminal confirms that the service initiated by the terminal can pass the ACDC check, the method further includes: The upper layer of the protocol stack of the terminal determines whether ACB inspection is required based on the coverage identifier corresponding to the application identifier of the ACDC inspection service.

4. The method according to any one of claims 1 to 3, characterized in that, before the upper layer of the protocol stack of the terminal starts the ACDC check according to the service initiated by the terminal, the method further includes:

If the terminal is in an idle state, the upper layer of the protocol stack of the terminal receives the system broadcast message sent by the terminal access layer, and notifies the higher layer of the terminal protocol stack to start the ACDC check. The system broadcast message is when the wireless access network device learns about itself. and/or after the core network equipment is congested and the ACDC check is started; or

If the terminal is in the connected state, the upper layer of the protocol stack of the terminal receives the dedicated signaling sent by the terminal access layer, and notifies the higher layer of the protocol stack of the terminal to start the ACDC check. The dedicated signaling is when the wireless access network device learns about itself. It is sent after ACDC is started and/or the core network equipment is congested.

5. An access control method, characterized in that it includes: the access layer of the terminal stores the coverage identification sent by the wireless access network device;

The access layer of the terminal sends a notification to start the ACDC check; when the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives the RRC establishment request;

If the access layer of the terminal determines that the stored coverage identifier covers the ACB check, then perform RRC connection establishment;

If the access layer of the terminal determines that the stored coverage identifier does not cover the ACB check, the ACB check is started. When the ACB check passes, the RRC connection is established.

6. The method according to claim 5, characterized in that, before the access layer of the terminal stores the coverage identification sent by the wireless access network device, it further includes:

The access layer of the terminal receives the notification to start the ACDC check, the service list and the coverage identification sent by the wireless access network device; or

The access layer of the terminal receives the notification of starting the ACDC check and the coverage identification sent by the wireless access network device.

7. An access control method, characterized in that it includes: the access layer of the terminal sends a notification to start the ACDC check; when the service initiated by the terminal passes the ACDC check, the access layer of the terminal receives the RRC establishment request, so The RRC establishment request carries the coverage identifier corresponding to the application identifier that passes the ACDC inspection service;

If the access layer of the terminal determines that the coverage identifier covers the ACB check, the RRC connection is established;

If the access layer of the terminal determines that the coverage identifier does not cover the ACB check, the ACB check is started. When the ACB check passes, the RRC connection is established.

8. The method according to claim 7, characterized in that, before the access layer of the terminal sends a notification to start the ACDC check, it further includes: the access layer of the terminal receives the notification to start the ACDC sent by the wireless access network device. Notice of inspection, business list and coverage identification; or

The access layer of the terminal receives the notification and coverage identification sent by the wireless access network device to start the ACDC check.

9. An access control method, characterized in that it includes: the access layer of the terminal receives a notification to activate ACDC; the access layer of the terminal receives an RRC establishment request message; if the RRC establishment request message carries no Instruction of ACB check, the access layer of the terminal performs RRC connection; if the RRC establishment request message carries an instruction of ACB check, the access layer of the terminal performs ACB check, and when the ACB check passes, perform RRC connection .

10. A terminal, characterized in that it includes: an acquisition module, used by the upper layer of the protocol stack to obtain the coverage identification; a processing module, used by the upper layer of the protocol stack to initiate application-based congestion control ACDC check according to the service initiated by the terminal; A determination module configured to confirm at a high level of the protocol stack that the service initiated by the terminal can pass the ACDC inspection, and determine that the coverage identification corresponding to the application identification of the ACDC inspection service and obtained by the acquisition module covers the access level and prohibits ACB inspection;

A sending module configured to send an RRC establishment request message to the access layer of the terminal after the upper layer of the protocol stack determines that the coverage identifier covers the access level and prohibits ACB inspection, and the request message carries an instruction not to perform ACB inspection;

The determination module is used to confirm that the service initiated by the terminal can pass the ACDC check by the upper layer of the protocol stack, and determine that the coverage ID obtained by the acquisition module corresponding to the application ID of the ACDC check service does not cover the ACB examine;

The sending module is configured to, after the determination module determines that the coverage identifier does not cover the ACB check, the upper layer of the protocol stack sends an RRC establishment request message to the access layer of the terminal, so that the access layer confirms that the ACB check has been completed, and then performs RRC. connect.

11. The terminal according to claim 10, wherein the acquisition module is specifically configured to: receive the coverage identifier sent by the core network device by the upper layer of the protocol stack; or

The upper layer of the protocol stack receives a service list sent by the core network device, and the service list carries a coverage identifier; or

The upper layer of the protocol stack receives a service list sent by the terminal access layer, and the service list carries a coverage identifier; or

The upper layer of the protocol stack receives the coverage identification sent by the wireless access network device through the access layer of the terminal ^ or

The upper layer of the protocol stack obtains the locally configured coverage identifier; or

The upper layer of the protocol stack obtains a locally configured service list, and the service list carries a coverage identifier.

12. The terminal according to claim 10 or 11, characterized in that, the terminal further includes: a judgment module, used for the upper layer of the protocol stack to obtain the acquisition module corresponding to the application identifier of the ACDC check service. Coverage flag to determine whether ACB inspection is required.

13. The terminal according to any one of claims 10 to 12, characterized in that, the terminal further includes: A receiving module, configured for the upper layer of the protocol stack to receive the system broadcast message sent by the terminal access layer, and notify the upper layer of the terminal protocol stack to start the ACDC check. The system broadcast message is when the wireless access network device learns about itself and/or the core network. After the device is congested, it is sent after starting the ACDC check; or it is used for the upper layer of the protocol stack to receive the dedicated signaling sent by the terminal access layer and notify the upper layer of the protocol stack of the terminal to start the ACDC check. The dedicated signaling is the wireless access network It is sent after the device starts ACDC after learning that it and/or the core network device is congested.

14. A terminal, characterized in that it includes: a storage module, used at the access layer to store the coverage identification sent by the wireless access network device;

The sending module is used for the access layer to send a notification to start the ACDC check; the receiving module is used for when the service initiated by the terminal passes the ACDC check, the access layer receives the RRC establishment request; the processing module is used for the After the access layer determines that the coverage identification stored in the storage module covers the ACB check, the RRC connection is established; or the access layer determines that the coverage identification stored in the storage module does not cover the ACB check and starts the ACB check. When After the ACB check passes, the RRC connection is established.

or

The access layer receives the notification and coverage identification sent by the wireless access network device to start the ACDC check.

16. A terminal, characterized in that it includes: a sending module, configured for the access layer to send a notification to start the ACDC check;

A receiving module configured to: when the initiated service passes the ACDC check, the access layer receives an RRC establishment request, where the RRC establishment request carries the coverage identification corresponding to the application identification of the service that has passed the ACDC check;

The processing module is used for the access layer to determine that the coverage identifier received by the receiving module covers the ACB check, and then performs RRC connection establishment; or for the access layer to determine that the coverage identifier received by the receiving module covers the ACB check. If the coverage identifier does not cover the ACB check, the ACB check is started. When the ACB check passes, the RRC connection is established.

or

18. A terminal, characterized in that it includes: a receiving module, used by the access layer to receive a notification to start ACDC; the receiving module, used by the access layer to receive an RRC establishment request message;

A processing module, configured to cause the access layer of the terminal to perform an RRC connection if the RRC establishment request message received by the receiving module carries an indication not to perform ACB checking; or used to perform an RRC connection if the RRC establishment request message received by the receiving module carries an instruction to perform ACB check. The terminal access layer performs ACB check. When the ACB check passes, RRC connection is performed.

19. A terminal, characterized in that it includes: a processor, used for the upper layer of the protocol stack to obtain the coverage identification;

The processor is configured to enable the upper layer of the protocol stack to initiate an application-based congestion control ACDC check according to the service initiated by the terminal; the processor is configured to confirm at the upper layer of the protocol stack that the service initiated by the terminal can pass the ACDC check, and determine that it passes The obtained coverage identification corresponding to the application identification of the ACDC inspection service covers the access level and prohibits ACB inspection; the transmitter is configured to, after the processor determines that the coverage identification covers the access level and prohibits ACB inspection, the protocol stack The upper layer sends an RRC establishment request message to the access layer of the terminal, and the request message carries an instruction not to perform ACB inspection;

The processor is configured to confirm at the upper layer of the protocol stack that the service initiated by the terminal can pass the ACDC check, and determine that the obtained coverage identifier corresponding to the application identifier of the service that passes the ACDC check does not cover the ACB check; The sender is configured to, after the processor determines that the coverage identifier does not cover the ACB check, the upper layer of the protocol stack sends an RRC establishment request message to the access layer of the terminal, so that the access layer confirms that the ACB check has passed, Make an RRC connection.

20. The terminal according to claim 19, wherein the processor is specifically configured to: receive a coverage identifier sent by a core network device at a higher level of the protocol stack; or receive a service sent by a core network device at a higher level of the protocol stack. list, the service list carries a coverage identifier; or

The upper layer of the protocol stack obtains a locally configured coverage identifier; or the higher layer of the protocol stack obtains a locally configured service list, and the service list carries the coverage identifier.

21. The terminal according to claim 19 or 20, characterized in that the processor is also used to:

The upper layer of the protocol stack determines whether ACB inspection is required based on the obtained coverage identification corresponding to the application identification of the ACDC inspection service.

22. The terminal according to any one of claims 19 to 21, characterized in that, the terminal further includes: a receiver, configured for the upper layer of the protocol stack to receive the system broadcast message sent by the terminal access layer, and notify the terminal The upper layer of the protocol stack starts the ACDC check, and the system broadcast message is sent by the wireless access network device after it learns that it and/or the core network device is congested and starts the ACDC check; or

The upper layer of the protocol stack receives the dedicated signaling sent by the terminal access layer, and notifies the upper layer of the protocol stack of the terminal to start the ACDC check. The dedicated signaling is started by the wireless access network device after learning that it and/or the core network device are congested. Sent after ACDC.

23. A terminal, characterized in that it includes: a memory, used by the access layer to store the coverage identifier sent by the wireless access network device; A transmitter, used by the access layer to send a notification to start the ACDC check; A receiver, used for the access layer to receive an RRC establishment request when the service initiated by the terminal passes the ACDC check; A processor, used in the After the access layer determines that the coverage identifier stored in the memory covers the ACB check, the RRC connection is established; or the access layer determines that the coverage identifier stored in the memory does not cover the ACB check, and starts the ACB check. When the ACB check After passing, the RRC connection is established.

or

25. A terminal, characterized in that it includes: a transmitter, used by the access layer to send a notification to initiate ACDC check; a receiver, used for the access layer to receive an RRC establishment request after the initiated service passes the ACDC check. , the RRC establishment request carries the coverage identification corresponding to the application identification of the ACDC check service; the processor is configured for the access layer to determine that the coverage identification received by the receiver covers the ACB check, and then performs RRC connection establishment; or The access layer determines that the coverage identifier received by the receiver does not cover the ACB check, then starts the ACB check, and performs RRC connection establishment when the ACB check passes.

or

27. A terminal, characterized in that it includes: The receiver is used for the access layer to receive the notification of starting ACDC; the receiver is used for the access layer to receive the RRC establishment request message; the processing module is used for if the RRC establishment request message received by the receiver carries Instruction not to perform ACB check, the access layer of the terminal performs RRC connection; or if the RRC establishment request message received by the receiver carries an instruction to perform ACB check, the access layer of the terminal performs ACB check, After the ACB check passes, the RRC connection is made.

28. An access control system, characterized by including: terminals, core network equipment and access network equipment; wherein,

The terminal is the terminal described in any one of claims 10-13; or the terminal is the terminal described in any one of claims 14-15; or the terminal is any one of claims 16-17 The terminal according to claim 1; or the terminal according to claim 18.